Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-76773
HistoryMar 23, 2023 - 12:00 a.m.

IBM Aspera Faspex Information Disclosure Vulnerability

2023-03-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
2
ibm aspera
faspex
information disclosure
vulnerability
attacker
sensitive credential

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.9%

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines (IBM). An information disclosure vulnerability exists in IBM Aspera Faspex, which can be exploited by an attacker to obtain sensitive credential information using specially crafted XML input.

CPENameOperatorVersion
ibm aspera faspexeq4.4.2

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.9%

Related for CNVD-2023-76773